Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bomcal-stg.bomcomes.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 31, 2026
Valid Until
October 29, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:16:50:FA:38:AE:B0:4F:68:2B:8C:86:B2:E6:20:AF:81:A9:98:1D:0C:3B:38:DB:4E:48:C5:60:C7:1E:11:08
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fixedshot.com
lavage.84dix.com
www.afterlifetickets.co.uk
get.akocarsapp.com
alexrichter.xyz
appf-staging.angelsense.com
atelierah.com
www.aysaalberta.ca
www.bana.me
bernardobraga.com
bilalakkar.com
bomcal-stg.bomcomes.com
offramp.red.dev.breeze.cash
app.bridge4cause.com
www.cafsoft.com
www.caipis-drachenboot.de
dev.capps.store
www.caretulip.com
robox.chapresearch.com
www.clooster.com
www.cloudvia.net
comisionespaypal.info
www.crazexstudio.com
www.darrieann.com
www.devfestbh.com
statics.infra.doorjames.com
www.drishtieyecentre.org
sng.drusantia.net
parents.edusystem.co.za
admin.elearningvendors.com
dev.contact-center.elli.eco
f.emage-me.com
app.enerly.de
entezariconsulting.com
handmade-events.eventmaster.jobs
fcstradingcompany.com
auth.finicom.net
www.furry-online.com
inventario.grandall.com.br
sponsor.greentransformationawards.ie
www.group3trading.com
www.h2tecnologia.com
harryfan.com
wrapped.hotwax.io
iamtheblurr.com
www.jdscreennow.com
my.joy.co
courses.jsmobiledev.com
lhhm.world
trips.lunamoons.com
www.lustree.org
www.lydiaandjef.com
www.mangla-india.com
www.mankinsresearch.org
editor.mapaspersonalizados.es
marounabdelnour.com
www.masaki-nonaka.com
michaeltesch.com
platform.mikmak.tv
community.myrealfood.app
token.nerochain.io
neurosurgerysgpgi.org
nexfuze.com
www.nextlevelfitnessgl.co.uk
www.nicheradar.io
omegavendorlist.com
www.onemuri.space
www.ouipool.com
www.ideasushi.pedidomovil.es
hospital.pethomers.com.br
resume.qtrens.in
mortgage.rainbowafterstorm.com
docs.reactionalmusic.com
www.renaultbolsa.com.br
runehorizon.com
shaameawadh.online
www.shiftintime.com
vuokrat.simonsalo.fi
www.sizhen.lol
www.smokekiss.in
www.snappyxo.io
tvf.spwn.jp
ciaafanfestcheer.sqwadhq.com
wkudunkinrace.sqwadhq.com
stichtingeemsvoord.nl
www.theybesaying.com
tibraqs.com
test.tostaduriacorcolen.cl
test.transmetricsplus.com
turntableturn.com
agent.uniquepaysolution.in
staging.smartweather.weatherflow.com
www.wings2rent.com
wispgarrett.com
fb.wkmn.dev
www.wondersofwater.com.au
vendedores.woox.com.mx
www.api.x-pr.co
smart-kirana.zitro.in
zyx.cl
Other domains in certificate